3 ms·
"Well duh just use this button combo nobody knows" "Well duh just use a strong password instead of abc123"
by jdthedisciple 4y ago
"Well duh just use this button combo nobody knows"
"Well duh just use a strong password instead of abc123"
- acdha 4y agoYes, that’s the point: real world security often has trade offs where there isn’t a simple option which is universally better. Biometrics are a huge win for most people’s realistic threat models because we have decades showing that when left to our own devices most of us pick easily-entered short passwords because it’s tedious entering longer ones many times a day, especially on a touchscreen, or, worse, people turn off auto-lock or set it for a longer period of time. The source event here is not something most people have to worry about and the suggested advice only applies to a small fraction of people who do have that risk so I think it’s better to educate people about the trade offs to both options as well as other things to consider like the one I mentioned.